News for hackers. Stuff that matters.

A comment on Google warns about two iOS zero-days 'exploited in the wild'. Parent comment

Re:Google warns about two iOS zero-days 'exploited in the wild' by kerng on Tuesday February 12, 2019 @04:33PM (#19147753)
If only Google would hold themselves accountable to the same standard. Android is a gigantic security mess, all caused and enabled by Google.
[ Parent | on HN ]
Re:Google warns about two iOS zero-days 'exploited in the wild' by kllrnohj on Tuesday February 12, 2019 @05:43PM (#19148422)
No it isn't? Android has a bug bounty program: https://www.google.com/about/appsecurity/android-rewards/

and regularly has strong showings at pwn2own. Android's security for the past couple of years has been superb.

[ Parent | on HN ]
Re:Google warns about two iOS zero-days 'exploited in the wild' by justapassenger on Tuesday February 12, 2019 @07:08PM (#19149046)
Android as an abstract project, yes. Android, as what's actually used by users, it's not that superb.

Google is slowly trying to fix it, but average Android device is way behind average iOS device in the wild, and that will be the case for many years to come.

[ Parent | on HN ]
Re:Google warns about two iOS zero-days 'exploited in the wild' by kllrnohj on Tuesday February 12, 2019 @08:12PM (#19149454)
> Android, as what's actually used by users, it's not that superb.

It is, though. The Android that's most commonly used by users is the one from Samsung, who also issues monthly security patches for a large range of devices: https://security.samsungmobile.com/workScope.smsb

LG ( https://lgsecurity.lge.com/security_updates.html ) does as well, and so do at least Motorola & Nokia.

> average Android device is way behind average iOS device in the wild, and that will be the case for many years to come.

[citation needed]

Average iOS device just got hit by 2 zero-days in the wild. And jailbreaking is a long and well established practice on iOS, which is literally privilege escalation exploits. There's a constant, continuous stream of those on iOS. There doesn't seem to be many (any?) on Android for a while now.

[ Parent | on HN ]
Re:Google warns about two iOS zero-days 'exploited in the wild' by joshuamorton on Tuesday February 12, 2019 @08:28PM (#19149539)
>There doesn't seem to be many (any?) on Android for a while now.

To be fair, there are a variety of reasons why this isn't the case that have nothing to do with security. An Android jailbreak is less valuable for a few reasons, among them that you can often purchase android devices with root privs, the same isn't possible for iphone.

[ Parent | on HN ]
Re:Google warns about two iOS zero-days 'exploited in the wild' by freehunter on Tuesday February 12, 2019 @07:16PM (#19149110)
It's one thing to release a security patch. It's a different thing to get it installed on user devices. If a user never has an opportunity to install the patch, that patch might as well not exist from that user's standpoint.
[ Parent | on HN ]
Re:Google warns about two iOS zero-days 'exploited in the wild' by kerng on Wednesday February 13, 2019 @02:02AM (#19151022)
There are millions of unpatched Android devices, probably forming a massive botnet by now. When you read it in the news sometime in the future, remember this post. You read it here first.
[ Parent | on HN ]